Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: WB75x5UgC24gV/m76j1H7MmkZDtMsYIYCSWERw2iMHM=
Subject key identifier: 1E:4A:21:B2:0F:53:87:DC:58:BF:D2:5E:92:94:E2:B0:3C:82:EC:D4
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 0198D884DF335573F80115B4D36279FBE11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0C36
Signing time: Sat 23 Aug 2025 20:00:43 +0000
Manifest this update: Sat 23 Aug 2025 20:00:43 +0000
Manifest next update: Sun 24 Aug 2025 20:00:43 +0000
Files and hashes: 1: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (hash: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: /8F3yTaEZzNy3tW7EVOxRvSg5Ava7MYYPL0ONd8dd+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:df:33:55:73:f8:01:15:b4:d3:62:79:fb:e1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Aug 23 20:00:43 2025 GMT
Not After : Aug 24 20:00:43 2025 GMT
Subject: CN=1e4a21b20f5387dc58bfd25e9294e2b03c82ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:e9:95:43:3a:4c:22:4b:1b:13:1e:ae:0c:
2b:8d:74:fd:6a:03:03:78:1a:96:98:d4:79:2a:b3:
68:42:e2:d5:f9:92:63:e8:95:59:98:7b:6b:75:f0:
a0:1d:f2:44:d7:22:4a:9c:90:f3:90:bd:c8:2f:c2:
fe:65:62:79:18:d0:11:eb:28:38:a6:e7:30:d7:32:
a2:4b:58:f8:42:4c:ad:56:f0:33:96:52:fe:ad:c9:
d5:0d:b8:24:09:ff:0e:ca:1e:f7:4c:e2:22:9a:ac:
bc:c4:ed:36:9d:ad:01:51:38:82:90:32:34:2d:9b:
72:c1:39:0f:e9:b7:c1:f5:20:b7:43:40:40:80:32:
da:d5:66:77:e4:a8:69:f2:fe:0f:a8:b4:f5:13:ab:
9e:5b:b9:59:4f:93:0f:5e:66:2d:02:4c:a3:49:83:
60:a8:39:e4:e7:7c:c7:02:41:48:c9:5d:d3:22:c6:
ab:98:f6:04:00:5f:4d:57:0d:b2:5a:eb:90:25:40:
26:84:fe:f4:ca:97:45:19:c1:76:2f:28:49:d9:bd:
d4:cf:e6:5d:29:55:ed:8c:21:0b:95:92:b4:20:7e:
a0:6b:5d:c1:63:89:bf:23:3d:fb:e5:2a:77:48:6c:
e3:da:21:99:90:73:61:49:ea:b5:fc:26:3b:6b:80:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:21:B2:0F:53:87:DC:58:BF:D2:5E:92:94:E2:B0:3C:82:EC:D4
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:f9:a1:9b:89:6c:25:a6:df:a4:b1:b1:ca:e8:53:68:56:
f5:8d:4d:7c:66:24:1d:34:67:32:4d:e6:fd:54:d4:5a:18:31:
ad:f7:15:00:52:d3:aa:af:2e:61:31:9d:7a:16:45:d3:f4:56:
e8:86:36:ef:81:a8:87:a8:39:1e:10:02:fc:af:80:8b:0d:84:
38:7e:3d:57:0c:87:1a:6c:9b:25:a3:6d:5e:6a:5d:1f:a7:1e:
02:a6:43:2c:ad:c8:d8:23:6f:bd:43:73:aa:d9:86:e3:5e:74:
e3:b7:be:b8:f8:44:ea:c7:c6:6e:76:a1:9d:bf:92:7b:f6:06:
41:75:7d:cc:ac:fe:fa:ab:13:45:01:5d:0c:e5:6f:3a:b3:d8:
45:75:00:a2:50:40:e8:78:e9:7d:ee:f0:9a:04:be:28:07:8b:
53:19:07:ff:72:e4:60:98:74:0a:45:c1:30:f4:19:a0:5e:81:
4b:04:0c:f8:cb:69:03:8d:87:66:5f:df:9d:01:77:79:37:4a:
49:66:22:2a:bb:a5:f5:f9:f0:3b:1b:b7:ba:01:dc:07:9f:d0:
55:89:5c:22:52:17:d7:93:c1:31:31:07:8b:29:ea:e7:2d:06:
59:ed:4e:10:60:86:5a:2a:a3:5c:8e:a1:58:69:52:cb:bf:82:
a4:ee:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:07 2025 by rpki-client